324 matches found
CVE-2018-0110
A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote support account even after it has been disabled via the web application. The vulnerability is due to a design flaw in Cisco WebEx Meetings Server, which would not disable access to...
kernel security and bug fix update
3.10.0-693.11.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-693.11.1 - powerpc perf: Fix book3s kernel to userspace backtraces Gustavo...
TestTrack Server Denial of Service Vulnerability
TestTrack is an open source feature switching system written in Ruby. server is one of the servers. A denial of service vulnerability exists in the split disablement feature in TestTrack Server 1.0 and earlier versions. A remote attacker could use this to cause a denial of service...
ONVIF Camera Snapshot
Nessus was able to acquire a snapshot from the remote camera using the GetProfiles and GetSnapshotUri ONVIF requests. include"compat.inc"; if description scriptid103867; scriptversion"$Revision: 1.3 $"; scriptcvsdate"$Date: 2017/11/15 18:01:11 $"; scriptnameenglish:"ONVIF Camera Snapshot";...
Microsoft Internet Explorer CVE-2017-8733 Spoofing Vulnerability
Description Microsoft Internet Explorer is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Internet Explorer 9, 10 and 11 are...
Theo CMS 2.0 SQL Injection
============================================= MGC ALERT 2017-004 - Original release date: July 11, 2017 - Last revised: August 12, 2017 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...
Important: Red Hat Security Advisory: openstack-neutron security update
An update for openstack-neutron is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2017-10677
CVE-2017-10677 affects Cisco Linksys EA4500 routers running firmware earlier than 2.1.41.164606. The vulnerability is a cross-site request forgery (CSRF) in the web interface, demonstrated via a request to apply.cgi to disable SIP. Affected component: apply.cgi on the EA4500’s web admin. Conseque...
CVE-2017-10677
Cross-Site Request Forgery CSRF exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP...
Trend Micro Deep Discovery Email Inspector kdump_setting Denial of Service Vulnerability
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within kdumpsetting.php. The issue results from the lack of proper...
CVE-2017-1000068
TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field...
CVE-2017-1000068
TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field...
Design/Logic Flaw
TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field...
CVE-2017-1000068: Improper Authentication
TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field...
CVE-2017-1000068
TestTrack Server versions 1.0 and earlier are vulnerable due to an authentication flaw in the split disablement feature, which could allow a remote attacker to disable arbitrary running splits and cause denial of service to clients. Supported documents from CNVD/CVE describe the denial of service...
Virtuozzo 7 : kernel / kernel-PAE / kernel-PAE-devel / etc (VZLSA-2017-0323)
An update for kernel is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
nss security and bug fix update
3.28.4-3.0.1 - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed 3.28.4-3 - Fix zero-length record treatment for stream ciphers and SSLv2 3.28.4-2 - Include CKBI 2.14 and updated CA constraints from NSS 3.28.5...
WP Security Audit Log - The Ultimate WordPress Audit Trail Plugin
The WP Security Audit Log plugin is a WordPress plugin that keeps an audit trail of everything that happens on your WordPress and WordPress multisite network. There are several WordPress audit trail / log plugins available, tough we chose to review WP Security Audit Log because it is has the most...